Denmark CPR Breach Exposes Data of 8.8 Million People
October 6, 2026
Attackers abused a private firm’s lawful lookup rights to pull names, addresses and CPR numbers of 8.8 million people from
Cybersecurity
Denmark CPR Breach Exposes Data of 8.8 Million People
Attackers abused a private firm's lawful lookup rights to pull names, addresses and CPR numbers of 8.8 million people from Denmark's Central Person Register.
Atlassian Fixes Critical CVE-2026-21589 in Eight Data Center Products
Atlassian disclosed CVE-2026-21589, a CVSS 9.3 path traversal flaw that lets unauthenticated attackers read web-root files in eight Data Center products.
FBI Drops Accenture Contractor After ShinyHunters PeopleSoft Breach
The FBI removed an Accenture contractor over an unapplied patch that let ShinyHunters breach FBIJobs.gov, as a suspected group leader was arrested in Jordan.
Nikkei Discloses Microsoft 365 and Google Workspace Account Breaches
Nikkei says attackers breached two employee email accounts, exposed data on 1,646 people and sent about 9,000 phishing emails from a Microsoft 365 account.
Ex-Engineer Gets 32 Months for Locking 3,000 Employer Devices
Daniel Rhyne, a former core infrastructure engineer, was sentenced to 32 months for locking over 3,000 devices at a New Jersey firm and demanding 20 ...
Senate Passes Health Care Cybersecurity and Resilience Act
The US Senate passed the bipartisan Health Care Cybersecurity and Resilience Act by unanimous consent, sending grants and coordination measures to the House.
ClickFix Variant Smuggles Payloads Through Browser Cache
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the Windows Run dialog's character limit.
ClingSTUN Botnet Abuses STUN Protocol for C2, Exploits Dozens of Flaws
FortiGuard and Nozomi detail Cling, a Linux botnet that hides command traffic in STUN requests and exploits about two dozen router and IoT vulnerabilities.
Rejetto HFS Flaw Lets Hackers Forge Admin Sessions for RCE
A critical Rejetto HFS flaw, CVE-2026-61500, lets attackers forge admin session cookies and gain remote code execution; active exploitation began October 1.
Citrix Patches New NetScaler Zero-Day Hit by Active Attacks
Citrix released emergency patches for CVE-2026-88779, a NetScaler SAML zero-day under active attack that can knock enterprise login gateways offline for users.
Atlassian Fixes Critical CVE-2026-21589 in Eight Data Center Products
October 6, 2026
Atlassian disclosed CVE-2026-21589, a CVSS 9.3 path traversal flaw that lets unauthenticated attackers read web-root files in eight Data Center
FBI Drops Accenture Contractor After ShinyHunters PeopleSoft Breach
October 6, 2026
The FBI removed an Accenture contractor over an unapplied patch that let ShinyHunters breach FBIJobs.gov, as a suspected group leader
Nikkei Discloses Microsoft 365 and Google Workspace Account Breaches
October 6, 2026
Nikkei says attackers breached two employee email accounts, exposed data on 1,646 people and sent about 9,000 phishing emails from
Ex-Engineer Gets 32 Months for Locking 3,000 Employer Devices
October 6, 2026
Daniel Rhyne, a former core infrastructure engineer, was sentenced to 32 months for locking over 3,000 devices at a New
Senate Passes Health Care Cybersecurity and Resilience Act
October 6, 2026
The US Senate passed the bipartisan Health Care Cybersecurity and Resilience Act by unanimous consent, sending grants and coordination measures
ClickFix Variant Smuggles Payloads Through Browser Cache
October 6, 2026
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the
ClingSTUN Botnet Abuses STUN Protocol for C2, Exploits Dozens of Flaws
October 6, 2026
FortiGuard and Nozomi detail Cling, a Linux botnet that hides command traffic in STUN requests and exploits about two dozen
Rejetto HFS Flaw Lets Hackers Forge Admin Sessions for RCE
October 5, 2026
A critical Rejetto HFS flaw, CVE-2026-61500, lets attackers forge admin session cookies and gain remote code execution; active exploitation began
Citrix Patches New NetScaler Zero-Day Hit by Active Attacks
October 5, 2026
Citrix released emergency patches for CVE-2026-88779, a NetScaler SAML zero-day under active attack that can knock enterprise login gateways offline
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.